program: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") (async, rerun: 32) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 32) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 32) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/14, 0xe, 0x0, 0x4, 0x261d, 0x7, 0xc06}}, 0x120) (async) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x185, &(0x7f0000000580)="$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") (async) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') (async) listxattr(&(0x7f0000000000)='./file6\x00', 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) (async, rerun: 64) fdatasync(r0) (rerun: 64) [ 87.051541][ T5336] Bluetooth: hci0: command tx timeout [ 87.070310][ T9] cfg80211: failed to load regulatory.db [ 87.123060][ T5363] loop0: detected capacity change from 0 to 512 [ 87.214966][ T5363] __kmem_cache_create_args(ext4_groupinfo_1k) failed with error -22 [ 87.223714][ T5363] CPU: 0 UID: 0 PID: 5363 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.223734][ T5363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.223741][ T5363] Call Trace: [ 87.223746][ T5363] [ 87.223752][ T5363] dump_stack_lvl+0x189/0x250 [ 87.223851][ T5363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.223864][ T5363] ? __pfx__printk+0x10/0x10 [ 87.223883][ T5363] ? __kmem_cache_create_args+0x1d8/0x320 [ 87.223925][ T5363] ? kmem_cache_free+0x18f/0x400 [ 87.223942][ T5363] __kmem_cache_create_args+0x237/0x320 [ 87.223958][ T5363] ext4_mb_init+0x2ff/0x2860 [ 87.223979][ T5363] ? __pfx_ext4_mb_init+0x10/0x10 [ 87.223989][ T5363] ? ext4_fc_replay_cleanup+0x7d/0xc0 [ 87.224009][ T5363] ? rcu_is_watching+0x15/0xb0 [ 87.224021][ T5363] ? ext4_fill_super+0x515f/0x6090 [ 87.224044][ T5363] ? kfree+0x4d/0x440 [ 87.224060][ T5363] ext4_fill_super+0x5253/0x6090 [ 87.224088][ T5363] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.224102][ T5363] ? set_blocksize+0x21e/0x500 [ 87.224120][ T5363] ? sb_set_blocksize+0x104/0x180 [ 87.224136][ T5363] ? setup_bdev_super+0x4c1/0x5b0 [ 87.224151][ T5363] get_tree_bdev_flags+0x40b/0x4d0 [ 87.224163][ T5363] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.224178][ T5363] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.224200][ T5363] vfs_get_tree+0x92/0x2b0 [ 87.224214][ T5363] do_new_mount+0x2a2/0x9e0 [ 87.224231][ T5363] ? ns_capable+0x8a/0xf0 [ 87.224242][ T5363] ? __pfx_do_new_mount+0x10/0x10 [ 87.224256][ T5363] ? path_mount+0x61c/0xfe0 [ 87.224270][ T5363] ? user_path_at+0x44/0x60 [ 87.224288][ T5363] __se_sys_mount+0x317/0x410 [ 87.224306][ T5363] ? __pfx___se_sys_mount+0x10/0x10 [ 87.224322][ T5363] ? do_syscall_64+0xbe/0x3b0 [ 87.224370][ T5363] ? __x64_sys_mount+0x20/0xc0 [ 87.224412][ T5363] do_syscall_64+0xfa/0x3b0 [ 87.224426][ T5363] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.224441][ T5363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.224453][ T5363] ? clear_bhb_loop+0x60/0xb0 [ 87.224467][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.224477][ T5363] RIP: 0033:0x7f139df9038a [ 87.224490][ T5363] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.224499][ T5363] RSP: 002b:00007f139ee0ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.224512][ T5363] RAX: ffffffffffffffda RBX: 00007f139ee0aef0 RCX: 00007f139df9038a [ 87.224520][ T5363] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f139ee0aeb0 [ 87.224528][ T5363] RBP: 0000200000000180 R08: 00007f139ee0aef0 R09: 0000000000800714 [ 87.224535][ T5363] R10: 0000000000800714 R11: 0000000000000246 R12: 00002000000001c0 [ 87.224542][ T5363] R13: 00007f139ee0aeb0 R14: 0000000000000485 R15: 0000200000000500 [ 87.224562][ T5363] [ 87.224567][ T5363] EXT4-fs: no memory for groupinfo slab cache [ 87.369887][ T5363] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 87.375647][ T5363] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 87.379233][ T5363] CPU: 0 UID: 0 PID: 5363 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.383184][ T5363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.387734][ T5363] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 87.390294][ T5363] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 e8 59 09 cc 66 66 66 66 66 66 2e [ 87.398885][ T5363] RSP: 0018:ffffc9000d43f700 EFLAGS: 00010006 [ 87.401844][ T5363] RAX: dffffc0000000000 RBX: ffffffff8b7e2b57 RCX: a375b039f8a87000 [ 87.405397][ T5363] RDX: 0000000000000000 RSI: ffffffff8b7e2b57 RDI: 0000000000000003 [ 87.408911][ T5363] RBP: ffffffff8b7a5d59 R08: 0000000000000001 R09: 0000000000000000 [ 87.412312][ T5363] R10: dffffc0000000000 R11: fffffbfff1f47547 R12: 0000000000000000 [ 87.415784][ T5363] R13: 0000000000000018 R14: 0000000000000018 R15: 0000000000000001 [ 87.419268][ T5363] FS: 00007f139ee0b6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 87.422752][ T5363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.426332][ T5363] CR2: 00007ffea8c56b40 CR3: 000000003f867000 CR4: 0000000000352ef0 [ 87.431876][ T5363] Call Trace: [ 87.433441][ T5363] [ 87.434708][ T5363] __kasan_check_byte+0x12/0x40 [ 87.436889][ T5363] lock_acquire+0x8d/0x360 [ 87.438919][ T5363] _raw_spin_lock_irqsave+0xa7/0xf0 [ 87.441577][ T5363] ? xa_destroy+0x59/0x2e0 [ 87.443939][ T5363] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 87.446972][ T5363] ? _printk+0xcf/0x120 [ 87.448759][ T5363] xa_destroy+0x59/0x2e0 [ 87.450655][ T5363] ext4_mb_init+0x136a/0x2860 [ 87.452859][ T5363] ? __pfx_ext4_mb_init+0x10/0x10 [ 87.455131][ T5363] ? ext4_fc_replay_cleanup+0x7d/0xc0 [ 87.457537][ T5363] ? rcu_is_watching+0x15/0xb0 [ 87.459531][ T5363] ? ext4_fill_super+0x515f/0x6090 [ 87.461730][ T5363] ? kfree+0x4d/0x440 [ 87.463552][ T5363] ext4_fill_super+0x5253/0x6090 [ 87.466097][ T5363] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.469810][ T5363] ? set_blocksize+0x21e/0x500 [ 87.472348][ T5363] ? sb_set_blocksize+0x104/0x180 [ 87.474580][ T5363] ? setup_bdev_super+0x4c1/0x5b0 [ 87.476828][ T5363] get_tree_bdev_flags+0x40b/0x4d0 [ 87.479128][ T5363] ? __pfx_ext4_fill_super+0x10/0x10 [ 87.481470][ T5363] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.484057][ T5363] vfs_get_tree+0x92/0x2b0 [ 87.486108][ T5363] do_new_mount+0x2a2/0x9e0 [ 87.488104][ T5363] ? ns_capable+0x8a/0xf0 [ 87.490066][ T5363] ? __pfx_do_new_mount+0x10/0x10 [ 87.492141][ T5363] ? path_mount+0x61c/0xfe0 [ 87.494011][ T5363] ? user_path_at+0x44/0x60 [ 87.495864][ T5363] __se_sys_mount+0x317/0x410 [ 87.497856][ T5363] ? __pfx___se_sys_mount+0x10/0x10 [ 87.500121][ T5363] ? do_syscall_64+0xbe/0x3b0 [ 87.502145][ T5363] ? __x64_sys_mount+0x20/0xc0 [ 87.504091][ T5363] do_syscall_64+0xfa/0x3b0 [ 87.506121][ T5363] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.508466][ T5363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.511100][ T5363] ? clear_bhb_loop+0x60/0xb0 [ 87.513256][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.515865][ T5363] RIP: 0033:0x7f139df9038a [ 87.518068][ T5363] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.527220][ T5363] RSP: 002b:00007f139ee0ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.530729][ T5363] RAX: ffffffffffffffda RBX: 00007f139ee0aef0 RCX: 00007f139df9038a [ 87.534193][ T5363] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f139ee0aeb0 [ 87.537735][ T5363] RBP: 0000200000000180 R08: 00007f139ee0aef0 R09: 0000000000800714 [ 87.541259][ T5363] R10: 0000000000800714 R11: 0000000000000246 R12: 00002000000001c0 [ 87.544594][ T5363] R13: 00007f139ee0aeb0 R14: 0000000000000485 R15: 0000200000000500 [ 87.547943][ T5363] [ 87.549574][ T5363] Modules linked in: [ 87.551612][ T5363] ---[ end trace 0000000000000000 ]--- [ 87.554106][ T5363] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 87.556649][ T5363] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 e8 59 09 cc 66 66 66 66 66 66 2e [ 87.564779][ T5363] RSP: 0018:ffffc9000d43f700 EFLAGS: 00010006 [ 87.567465][ T5363] RAX: dffffc0000000000 RBX: ffffffff8b7e2b57 RCX: a375b039f8a87000 [ 87.571012][ T5363] RDX: 0000000000000000 RSI: ffffffff8b7e2b57 RDI: 0000000000000003 [ 87.574558][ T5363] RBP: ffffffff8b7a5d59 R08: 0000000000000001 R09: 0000000000000000 [ 87.577966][ T5363] R10: dffffc0000000000 R11: fffffbfff1f47547 R12: 0000000000000000 [ 87.581259][ T5363] R13: 0000000000000018 R14: 0000000000000018 R15: 0000000000000001 [ 87.585190][ T5363] FS: 00007f139ee0b6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 87.589211][ T5363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.592135][ T5363] CR2: 00007ffea8c56b40 CR3: 000000003f867000 CR4: 0000000000352ef0 [ 87.595458][ T5363] Kernel panic - not syncing: Fatal exception [ 87.598322][ T5363] Kernel Offset: disabled [ 87.600183][ T5363] Rebooting in 86400 seconds..